Sony Admits Private PSN Info Has Been Stolen - All Of It

[loogie]

is it even possible for a worldwide company to be have 100% security? Especially in the digital world...

Yes, with great difficulty and expense

are you kidding me? you actually think its possible? people are easily getting away with pretending to be others in real life... how do you think anonamous person A can securely connect to a anonamous place B remotely with 100% security? your dreaming man.

 

[NicoDK]

Just called the bank, according the intern info at Danish Bank there isn't talk of Danes info getting stolen, and if it happens both me and my mum is covered.

So, nope. I still can't get my piss to boil over this.

 

[headshotcatcher]

snip

snip

snip

snip

Yes, it was Sony who put PSN down and stole all your credit card information. They basically gave the info away, right?

No they didn't, it got HACKED, I.E gotten through illegitimate means.. Sony can't do anything about it, and that's why PSN is down and they're designing a new network now.

Is it 'Sony stole your credit card information'? No. It's 'Hackers stole your credit card information'.

Besides, if you do believe it's Sony's fault, you're the one who gave them the credit card information in the first place.. (yes I know that's a fallacy but think about it )

I completely know its the hackers fault but its Sonys gaming online service, you believe it would be secure.

Also I was complaining that they had taken a week to tell people that there information may have been stolen, why did they take this F'ing long? They should have apoligised, explained and admitted their faults and their plans from the start, not hide them like a small boy whos trying to lie to his parents.

If it's only a small possibility that info was stolen, it's not worth it to say that it might have been, because that will only cause chaos and/or uproar. Besides, as I said to the previous guy: it has existed for 5 years and it has taken that long for any serious hacking to happen.
Not to mention, they did try their best to keep security high (but that wasn't met with happiness from consumers either, exhibit A: the firmware uproar)

Besides, is it even possible for a worldwide company to be have 100% security? Especially in the digital world...

Hmm, true enough but I believe (You may not agree) that if it was the smallest possibility ever that information could have been comprised they should have said from the start because if something does come out, the uproar would be even worse.

Your right that no company can have 100% security but if something happens it shouldnt try to hide information from its customers who have spent hard earned money on their products.

Well, maybe they didn't know what the gravity of the hack was, maybe they suspected that it only allowed people to freely download games, but they found out that credit card info was available through later testing?

Well thats what they said a few hours about right? (Sorry didnt see before I posted that they should have known from the start) But if your hacked, the first reason you suspect the reasoning to be is so that the hacker could gain your information. On a large scale like the Playstation Network, I would consider it worth mentioning that this could be a possibility.

As far as I heard it was mainly used for 'pirating' games, so I'd figured it was /just/ stealing games as well. Maybe they should have suspected it, but I really don't think they should have spread the suspection on a hunch.

 

[headshotcatcher]

is it even possible for a worldwide company to be have 100% security? Especially in the digital world...

Yes, with great difficulty and expense

And with lots of hate from the public, as they feel their freedom is at stake

that's where most of the expense comes in, it has to be fast, easy, un-intrusive reliable ect or people won't use it

and, obviously the customer won't want to pay the bills for you, they just expect it!
heck, i roll my eyes when verified by visa pops up on a site, but, well it works i guess ?

I don't mean monetary cost, I mean stuff like the hate that brewed from disallowing the custom firmware

 

[JedivsPaper]

Well when this is all sorted im moving my ps3 out the living room and connecting my Xbox 360 agian =/

 

[godofallu]

At least the PS3 doesn't explode randomly. See there is always a bright side.

It might stop working and then send away all of your private information, but it won't explode and kill you. Yet.

 

[[Kira Must Die]]

Holy shit...

Well, thank god I don't have a PS3.
My friend has a PS3 and has always been rubbing it in my face. Maybe this will take him down a natch.
But aside from that, I really feel sorry for anyone with a PSN account.

 

[SnootyEnglishman]

*slow clap* Way to go Sony you've proven that you're even more of a douchebag company.

 

[mew4ever23]

Yikes. Change those credit card numbers and watch your bank and credit card statements closely, folks! I'm glad I don't have a PSN account, and I feel sorry for anyone affected now. This has gone from mildly amusing debacle to a full on train wreck of failure. Just be glad this isn't Microsoft having these issues.

 

[Sven und EIN HUND]

Fuck. Me. I'm damn thankful I don't have a PSN account, right now...

 

[infohippie]

This would be funny if it weren't so serious. I hope nobody on here (or anyone at all, really) gets charges racked up on their cards. Good luck, everyone.

 

[jebussaves88]

It is easy to see some escapist writers bias towards Anonymous. They just love 'em, and won't stop reporting their actions, until suddenly, their actions lead to one of the greater upsets of this generation. I notice anonymous isn't even mentioned in this article... funny that.

Reporting on anonymous is irresponsible journalism, as it just gives attention and meaning to the causes of those who should not be carrying on as such.

By generation, I mean games console generation, not human generation.

 

[Sentox6]

is it even possible for a worldwide company to be have 100% security? Especially in the digital world...

Yes, with great difficulty and expense

are you kidding me? you actually think its possible? people are easily getting away with pretending to be others in real life... how do you think anonamous person A can securely connect to a anonamous place B remotely with 100% security? your dreaming man.

Forget 100% security, Sony's own admittances indicate they aren't even following the basics.

The whole notion that password details have been taken defies belief. There's a reason that most internet sites can't tell you what your own password is and can only reset it - it's because the server itself doesn't actually store it at all. Your chosen password is hashed when it's first transmitted, and only this checksum is stored. When you enter your login, the password is hashed again and compared to what is on the system - if we have a match, you are granted access.

In short, there is no actual need whatsoever for your password to be stored server-side at all. Sony's statement suggests that it was actually storing sensitive information in plain text format, which defies belief. The only other explanation is that hackers only got access to the hashes and may have compromised a small minority of passwords by brute-forcing this data using something like a dictionary look-up. However, from the tone of Sony's apology this does not appear to be the case.

I surprised more isn't being made of this. The implication that Sony was using plain-text storage instead of cryptographic hashing is just mind-boggling.

It is easy to see some escapist writers bias towards Anonymous. They just love 'em, and won't stop reporting their actions, until suddenly, their actions lead to one of the greater upsets of this generation. I notice anonymous isn't even mentioned in this article... funny that.

I'm grateful you aren't writing the news reports then. I prefer something other than complete speculation stated as fact, personally.

 

[The Woolly One]

Not informing customers immediately of a leak of personal information is appalling frankly, as is the fact that they may have been storing passwords in plain text.

The hack itself isn't Sony's fault - just think, PSN has been around for several years now and this is the first attack of this scale to occur. It was bound to happen eventually, and nothing online can ever be 100% safe. We don't know how sophisticated the attack was so we can't blame Sony's security yet.

Just glad I have XBL, but I imagine Microsoft are having a panic about security. Only a matter of time before some twat decides to hack that too. I hope the trouble for those of you with PS3s passes soon.

Its easy to blame the massive company, but in this case I think almost all the blame rests at the feet of the hacker(s).

 

[xx19kilosoldier]

Im going go ahead and assume this is 30 pages of straight whining, wait while I check...yep

Well, I guess you did not change the trend then..eh?

 

[Tigurus]

So glad I have no creditcard
Still sucks though.

 

[Mackinator]

Are people not freaking out about this? If card details have been obtained are Sony not in a LOT of trouble for losing them?

For once I guess im lucky not to have a PS3

 

[ShakyFiend]

Im going go ahead and assume this is 30 pages of straight whining, wait while I check...yep

Well, I guess you did not change the trend then..eh?

Oh, my bad, let me just buck this thing